CVEvulnerability
CVE-2026-31417
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2026-04-13
- Last modified
- 2026-10-15
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 (416baaa9-dc9f-4396-8d5f-8c081fb06d67)
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-191
Description
In the Linux kernel, the following vulnerability has been resolved:
net/x25: Fix overflow when accumulating packets
Add a check to ensure that `x25_sock.fraglen` does not overflow.
The `fraglen` also needs to be resetted when purging `fragment_queue` in
`x25_clear_queues()`.
Affected configurations
• linux linux kernel (>= 2.6.12.1 < 5.10.253)
• linux linux kernel (>= 5.11 < 5.15.203)
• linux linux kernel (>= 5.16 < 6.1.168)
• linux linux kernel (>= 6.2 < 6.6.134)
• linux linux kernel (>= 6.7 < 6.12.81)
• linux linux kernel (>= 6.13 < 6.18.22)
• linux linux kernel (>= 6.19 < 6.19.12)
• linux linux kernel 2.6.12
• linux linux kernel 7.0
Related
Weakness · CWE (1)
- CWE-191 Integer Underflow (Wrap or Wraparound) weakness
References
- https://git.kernel.org/stable/c/1734bd85c5e0a7a801295b729efb56b009cb8fc3 Patch
- https://git.kernel.org/stable/c/4e2d1bcef78d21247fe8fef13bc7ed95885df2b5 Patch
- https://git.kernel.org/stable/c/6e568835ea54a3e1d08e310e34f95d434e739477 Patch
- https://git.kernel.org/stable/c/798d613afb64b01a203f448fb0f43c37c6afe79d Patch
- https://git.kernel.org/stable/c/8c92969c197b91c134be27dc3afb64ab468853a9 Patch
- https://git.kernel.org/stable/c/96fc16370b0bceb289c7e0479bd0540b81e257aa Patch
- https://git.kernel.org/stable/c/a1822cb524e89b4cd2cf0b82e484a2335496a6d9 Patch
- https://git.kernel.org/stable/c/f953f11ccf4afe6feb635c08145f4240d9a6b544 Patch
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html cert-portal.siemens.com
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html cert-portal.siemens.com
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html cert-portal.siemens.com